Reproducible Builds Diffoscope
2 CVEs affecting Reproducible Builds Diffoscope. Latest disclosed: 2024-02-27. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-0359 | Critical | 9.8 | 2018-04-13 | diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive. |
CVE-2024-25711 | High | 7.5 | 2024-02-27 | diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/id_rsa, may be disclosed to an a… |